[Snort-users] IPS using DAQ AFPacket problems
Al Lewis (allewi)
allewi at ...589...
Mon Jan 12 18:00:51 EST 2015
The command should be:
sudo /usr/local/bin/snort -A console -u snort -u snort -c /etc/snort/snort.conf --daq afpacket -i eth0:eth1
QA Software Engineer
SOURCEfire, Inc. now part of Cisco
9780 Patuxent Woods Drive
Columbia, MD 21046
Phone: (office) 443.430.7112
Email: allewi at ...589...
From: Jake Hann [mailto:jake at ...17053...]
Sent: Monday, January 12, 2015 5:16 PM
To: 'Y M'
Subject: Re: [Snort-users] IPS using DAQ AFPacket problems
Okay, I have my environment setup again. I am running this command to test and debug:
sudo /usr/local/bin/snort -A console -u snort -u snort -c /etc/snort/snort.conf -i eth0:eth1 -Q
One it gets to Decoding Ethernet, snort just dies. I haven't been able to figure out why. Thanks for your help.
From: Y M [mailto:snort at ...15979...]
Sent: Thursday, January 01, 2015 1:15 AM
To: Jake Hann
Subject: RE: IPS using DAQ AFPacket problems
What exactly not working? Are you receiving any sort of errors? Please share your snort.conf and the command you use to run Snort so we can take a look.
Please keep the posts on the list.
From: jake at ...17053...<mailto:jake at ...17053...>
To: snort at ...15979...<mailto:snort at ...15979...>
Subject: IPS using DAQ AFPacket problems
Date: Wed, 31 Dec 2014 14:45:05 -0700
I successfully setup snort using one of the guides on snort.org. I was trying to now turn it into an inline IPS using the Snort IPS using DAQ AFPacket guide and it is not working. I followed all the steps to no avail. I have done some poking around the internet but have not been able to find anyone who can help me with my problem. Where would you recommend I go for help. Thank you.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Snort-users